Privacy Policy – Website Visitors

This Privacy Policy explains how Spotlights Academy LLP (trading as Spotlights Theatre School) collects, uses, and protects personal data when you visit and use our website.

It applies to visitors to www.spotlights.co.uk and related online services.

For information about how we process personal data relating to students, parents/guardians, customers, and ticket purchasers, please see our  Privacy Policy – Students, Parents/Guardians & Customers.

1. Who We Are

Spotlights Academy LLP trading as Spotlights Theatre School is the data controller responsible for your personal data.

Contact details:

Email: hello@spotlights.co.uk
Website: www.spotlights.co.uk

2. What Information We Collect

When you use our website, we may collect the following information:

a) Information You Provide

  • Name
  • Email address
  • Telephone number
  • Enquiry details
  • Newsletter sign-up details
  • Messages submitted through forms or chat services

b) Automatically Collected Information

When you visit our website, we may automatically collect:

  • IP address
  • Device type and browser information
  • Operating system
  • Pages visited and time spent
  • Referring websites
  • Cookies and tracking data

3. How We Collect Your Information

We collect personal data through:

  • Website contact forms
  • Newsletter subscription forms
  • Online chat tools
  • Cookies and tracking technologies
  • Website analytics software

4. How We Use Your Information and Our Lawful Basis

We only use personal data where the law allows us to do so.

PurposeType of DataLawful Basis
Responding to enquiriesName, email, messageLegitimate interests
Managing newsletter subscriptionsName, emailConsent
Website analyticsUsage data, IP addressLegitimate interests / consent (where required)
Improving website performanceTechnical dataLegitimate interests
Preventing misuse and ensuring securityIP address, usage dataLegitimate interests

You may withdraw your consent for marketing communications at any time.

5. Marketing Communications

We will only send you marketing emails where:

  • You have actively opted in, or

  • You are an existing customer and we are permitted to contact you under applicable law

You can unsubscribe at any time using the link in our emails or by contacting us.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Ensure the website functions properly

  • Analyse website usage

  • Improve user experience

  • Support marketing activities (where applicable)

Non-essential cookies are only placed with your consent through our cookie banner.

For full details, please see our Cookie Policy.

7. Third-Party Services

We may use trusted third-party services to support our website, including:

  • Website hosting providers

  • Analytics tools (e.g. Google Analytics)

  • Email marketing platforms

  • Online chat and customer support tools

These providers may process personal data on our behalf and are required to protect it in accordance with data protection law.

8. International Transfers

We do not routinely transfer personal data outside the UK.

Where any third-party provider stores data outside the UK, appropriate safeguards are in place in accordance with UK GDPR.

9. Data Retention

We retain website-related personal data only for as long as necessary.

This includes:

  • Enquiry data: We retain enquiry records for business record-keeping purposes. Active marketing communications to prospective customers will normally be limited to a period of up to 24 months from the last interaction, unless the individual has chosen to remain subscribed or re-engages with us.

  • Newsletter records: until you unsubscribe

  • Analytics data: in line with platform settings

  • Technical logs: in line with security requirements

Retention periods are reviewed regularly.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

  • Secure systems and access controls

  • Encrypted connections where appropriate

  • Staff training and confidentiality obligations

Access to personal data is limited to authorised personnel and approved service providers.

11. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of data (where applicable)

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent (where applicable)

To exercise your rights, please contact us using the details provided in the “Who We Are” section above.

12. Complaints

If you are dissatisfied with how we handle your personal data, please contact us first so we can try to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office (ICO):

www.ico.org.uk

13. Links to Other Privacy Policies

This Website Privacy Policy applies only to website use.

For information about how we process personal data relating to enrolment, ticketing, events, and students, please see our Privacy Policy – Students, Parents/Guardians & Customers.

14. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be published on our website.

15. Contact Us

If you have any questions about this Privacy Policy, please contact:

Spotlights Academy LLP
Email: hello@spotlights.co.uk
Website: www.spotlights.co.uk